Rubygems Mail Gem vulnerabilities

2 known vulnerabilities affecting rubygems/mail_gem.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2012-2140HIGHCVSS 7.5≤ 2.4.1v2.3.2+1 more2012-07-18

CVE-2012-2140 [HIGH] CWE-20 CVE-2012-2140: The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell m The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

CVE-2012-2139MEDIUMCVSS 5.0≤ 2.4.3v2.3.2+2 more2012-07-18

CVE-2012-2139 [MEDIUM] CWE-22 CVE-2012-2139: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.